Good to know they're doin' somethin'
Usually changing your password every few months is the safe thing to do since most of the time the hackers have had your password on their database for a few months and changing your password nulls that list of "people to hack".
Wonder what this means for those of us have physical authenticators and what not.
Always have a different password for every site and account you have. Using the same password everywhere is inviting trouble.
Hope they put the mobile AH back up soon as it's the most convenient way to do auctions in many circumstances :(
I have a guildie who has the authenticator on his smartphone, and who was hacked despite that 2 days ago after visiting a couple of wow sites on that phone. We thought it might have been raidfinder, but since they announced this, it's much more likely that it was the mobile armory. So it appears that people who DID go through the extra step of getting the authenticator are still being hacked because of this.
Phone = wireless connection = more easily hacked, depending on where you are using the device.Glad Blizz sent out notice, but more glad I am not wired into my phone, because O.O
And suddenly I'm glad that I've temporarily had to stop paying to play my account. Can't hack an inactive account, can you? ;)Seriously though, I'm glad that Blizz is at work on this. Hackers will always try to find a way in, and Blizz always finds a way to shut them down. (Outside of poor user practices, that is.)
every time i use mobile armory it locks my account and then i need to reset passwords ive just stopped using it altogether
I have one password for World of Warcraft. It's not shared with any other password I have, and it's not something someone could just guess. That should be all the security I need, and I certainly won't be paying Blizzard to buy an authenticator when their side is the one getting hacked.
if you feel that the authenticator is a gimmick to try and get money from you... i feel sorry for you but that is your right. Frankly, I think you're a fool though. try not to be too insulted.
Does anybody know if Blizz can tell us the ip address or where did came from a possible invasion on an account logged in? Cause one time, my account was closed after a message saying sth like "suspicious activity bla bla".